What FinCEN’s New BOI Rule Means for Financial Crime Investigations

By Chad Longo |

August 26, 2026

For years, the Corporate Transparency Act (CTA) was viewed as one of the most significant anti-money laundering reforms in modern U.S. history. After decades of criticism from transparency advocates, anti-corruption organizations and international bodies regarding the ease with which legal entities could be formed and used to obscure beneficial ownership information (BOI), the CTA promised to close a longstanding gap in the U.S. financial crime framework.

The objective of CTA was not to create transparency for transparency’s sake. It was to provide investigators, financial institutions and regulators with a more efficient means of identifying the individuals ultimately benefiting from or controlling legal entities operating within the United States.

The expectation was that beneficial ownership reporting would reduce investigative friction, improve accountability and make it harder for criminals to hide behind layers of corporate anonymity. That expectation has now changed dramatically.

A Victory for Deregulation or a Setback for Transparency?

FinCEN’s latest final rule fundamentally narrows beneficial ownership reporting requirements. Domestic reporting companies are now exempt from reporting beneficial ownership information, U.S. persons are generally exempt from providing ownership information in connection with foreign reporting companies, and future reporting obligations are largely limited to certain foreign entities registered to do business in the United States and their non-U.S. beneficial owners. FinCEN has also indicated its intention to remove much of the information previously collected on domestic entities and U.S. persons from its beneficial ownership database.

Supporters of the rule argue that it appropriately reduces burdens on millions of legitimate businesses. Critics argue that it dismantles a transparency framework before it had the opportunity to demonstrate its value. Regardless of which side of the policy debate one falls on, a separate question deserves the attention of every anti-money laundering (AML) professional, fraud investigator, financial crime analyst and law enforcement agency: what happens when investigative expectations remain unchanged, but the availability of information decreases?

The answer should concern anyone responsible for detecting illicit activity.

Same Threats. Less Data.

The criminal methodologies that motivated the creation of the CTA have not disappeared. Shell companies continue to play a central role in money laundering, sanctions evasion, procurement fraud, corruption, organized crime, narcotics trafficking, human trafficking, tax evasion and a growing range of transnational financial crimes.

  • Financial institutions are still required to perform customer due diligence.
  • Investigators are still expected to identify beneficial owners.
  • Law enforcement agencies are still tasked with uncovering hidden financial networks.
  • Suspicious Activity Reports still require meaningful context and supporting intelligence.

The threats remain the same. The obligations remain the same. The difference is that one of the few areas where investigators expected to gain visibility has instead become more limited or nearly disappeared overnight.

This is why the most important consequence of the final rule may not be what it removes from businesses. It may be what it adds to the workload of investigators.

Treasury’s justification for the rule is rooted in reducing regulatory burden and concludes that broad collection of domestic beneficial ownership information would not provide sufficient value relative to the compliance costs imposed on legitimate businesses. Yet the requirement for the investigative work itself has not vanished. Somebody must still determine who controls a legal entity, uncover nominee relationships, identify hidden beneficial owners, map sanctions exposure and determine whether a company exists for legitimate commercial activity or as a vehicle for criminal conduct. The difference is that much of that responsibility now shifts back to financial institutions, law enforcement agencies and analysts who must continue answering those questions without the reporting framework and corresponding data feeds many have relied on to support those efforts.

A Broader Trend of Shrinking Visibility

This challenge becomes even more significant when viewed in the context of broader global trends. Over the last several years, AML professionals have experienced a steady reduction in access to data that was once widely available for investigative and due diligence purposes. Recently, China issued Decrees 834 and 835, which had the indirect impact of likely restricting and reducing long-term access to corporate information and datasets used to understand ownership structures, corporate relationships and beneficial ownership risks. Investigators working sanctions, corruption and AML cases increasingly will encounter situations where required intelligence is harder to obtain while regulatory expectations remain unchanged. Similar restrictions have emerged across various platforms and jurisdictions globally, whether through privacy regulations, closed registries, reduced access to social media content or limitations on commercial datasets.

Viewed individually, each of these developments can be justified for different reasons. Collectively, however, they tell a concerning story. Financial institutions are being asked to detect increasingly sophisticated financial crime risks while operating with fewer investigative resources and less accessible information.

Investigators today are responsible for identifying sanctions evasion networks, sophisticated fraud operations, trade-based money laundering structures and corruption networks that span multiple jurisdictions. These investigations are no easier than those conducted a decade ago. In many respects, they are substantially more complex. Yet the information available to support such investigations is narrowing.

FATF, Transparency & the Global Direction of Travel

This tension sits at the heart of FATF Recommendation 24, which calls on countries to ensure that competent authorities can obtain adequate, accurate and up-to-date beneficial ownership information in a timely manner. FATF’s concern has never been that every legal entity poses a risk. Rather, the concern is that criminals exploit anonymity. When ownership information becomes difficult to identify, verify or obtain, investigations become longer, more resource-intensive, and ultimately less effective. The objective of ownership transparency is not administrative convenience. It is the recognition that opacity creates opportunity for illicit actors.

Historically, discussions about ownership transparency have often focused on jurisdictions characterized as secrecy havens, opaque financial centers or weak transparency environments. What sophisticated investigators understand, however, is that geography is rarely the real issue. Criminals do not seek out jurisdictions because of their location. They seek environments that provide opacity. Whether that opacity is achieved through trusts, nominee arrangements, shell companies, layered ownership structures, bearer instruments or weak reporting obligations is largely irrelevant. The underlying objective is always the same: making it more difficult for investigators to determine who ultimately controls an asset, company, account or transaction. FinCEN’s Final Rule paved new inroads to the United States for this very reason.

The Regulatory Arbitrage Problem

This reality raises one of the fundamental questions posed by FinCEN’s final rule. If foreign entities remain subject to ownership reporting because of their perceived risk profile, what incentives exist for sophisticated actors to continue utilizing structures that require disclosure when alternative structures may provide greater anonymity?

This question is likely to reignite longstanding discussions surrounding Delaware, Wyoming, Nevada, South Dakota and other jurisdictions that frequently appear in debates about corporate transparency, trusts, asset protection structures and beneficial ownership visibility. The issue is not whether these jurisdictions intentionally facilitate criminal activity; they do not. Millions of entirely legitimate businesses use these frameworks every year. The issue is that sophisticated financial criminals have historically gravitated toward structures that maximize flexibility while minimizing scrutiny. When transparency differs between legal structures, investigators naturally ask whether illicit actors will adapt their behavior accordingly. They absolutely will.

This phenomenon is not unique to financial crime. It is regulatory arbitrage, and it occurs whenever individuals or organizations adjust their behavior to exploit differences in regulatory frameworks. The concern is not that every domestic legal entity suddenly becomes suspicious. The concern is that suspicious entities become harder to distinguish from legitimate ones. Every reduction in visibility makes that differentiation more difficult.

The Impact on Law Enforcement

The practical implications for law enforcement are significant. Prior to the CTA, ownership investigations often required a combination of subpoenas, search warrants, court orders, mutual legal assistance treaties, public records analysis and commercial intelligence gathering. One of the anticipated benefits of beneficial ownership reporting was the potential to reduce reliance on these tools and accelerate investigations. With the narrowing of reporting requirements, many agencies may find themselves continuing to rely on the same resource-intensive processes that investigators have used for years.

For agencies facing staffing and budget constraints, the consequences are obvious. Every subpoena takes time. Every records request introduces delays. Every additional layer of legal process consumes resources that could otherwise be directed toward analysis or enforcement activity. Financial crime networks move quickly. Funds can be layered, transferred, converted and dispersed across jurisdictions in a matter of hours. When ownership information becomes harder to access, investigations become slower at the exact moment criminal organizations are becoming faster, especially with the adoption and acceleration of AI-driven typologies.

Financial Institutions Inherit the Burden

Financial institutions face a similar challenge. Importantly, FinCEN’s final rule does not eliminate customer due diligence obligations, nor does it diminish the need for financial institutions to understand the ownership and control structures of their customers. Banks, fintechs, payment providers and other regulated entities are still expected to identify beneficial owners, assess risk, conduct enhanced due diligence and submit meaningful SAR/STRs when suspicious activity is detected. What changes is the availability of information needed to support those obligations.

The practical reality is that financial institutions now shoulder an even greater responsibility for collecting, validating and contextualizing ownership intelligence. The need for ownership visibility did not disappear with the reporting requirement. Instead, much of the work shifts back to the institutions that are already serving as the first line of defense against financial crime.

The Rise of Intelligence-Led Investigations

This dynamic will likely accelerate another trend that has been developing across the financial crime industry for several years: the increasing importance of nontraditional data sources and intelligence-led investigations.

For much of AML’s history, investigators have relied heavily on structured data. Corporate registries, sanctions lists, Government records, transaction monitoring systems and KYC documentation have formed the backbone of financial crime investigations. Those sources remain important, but the accessibility and completeness of many structured sources are increasingly narrowing just as modern illicit networks operate in ways that leave traces—or often operate almost entirely—outside traditional compliance systems.

That gap is where nontraditional data sources should become far more central to investigative practice. Financial crime investigators use Fivecast to collect and integrate diverse data from across social media and other online data sources, ensuring information resilience when the data landscape unexpectedly diminishes. Social media activity, digital footprints, online forums, messaging platforms, employment histories, geolocation indicators, business websites, adverse media reporting, procurement records, litigation filings, leaked datasets, online marketplaces, cryptocurrency ecosystems and broader open source intelligence can help reveal relationships, behaviors and networks that structured records may no longer expose on their own.

In many cases, these sources tell investigators far more about an individual or entity’s behavior than a corporate registry ever could.

  • A company may list a nominee director, but digital footprints may reveal who is actually operating the business.
  • Corporate records may show little information about ownership, but social media activity may expose relationships, affiliations, travel patterns, business interests and networks of association.
  • Public records may identify a legal structure, while open source intelligence reveals how that structure is being used.

Given these limitations, analysts investigating sanctions evasion, fraud, human trafficking and corruption increasingly build cases through network analysis and digital intelligence rather than relying solely on formal ownership records.

As beneficial ownership transparency narrows, the value of these alternative intelligence sources rises. The institutions most successful at identifying hidden risk will likely be those capable of fusing structured compliance data with unstructured investigative intelligence to develop a more complete understanding of entities, networks and behaviors.

Why Public-Private Partnerships Matter More Than Ever

As ownership information becomes less accessible through formal reporting mechanisms, financial institutions and law enforcement agencies must become increasingly collaborative. High-quality SAR narratives become more valuable, information-sharing initiatives become more important and joint investigations become more critical. No single institution, regulator or agency possesses sufficient visibility into today’s financial crime ecosystem, so effective investigations increasingly depend upon connecting fragmented intelligence held across both the Public and Private Sectors.

The irony of the current moment is difficult to ignore. As criminal organizations become more sophisticated, more technologically capable and more globally connected, many of the traditional sources of investigative visibility are becoming more restricted.

  • Ownership transparency may be narrowing.
  • Corporate records are becoming harder to obtain in key jurisdictions.
  • Digital platforms are restricting access to information.

Yet the expectation that investigators identify and disrupt financial crime remains unchanged.

The Real Risk Is Not What Criminals Gain, But What Investigators Lose

Criminals do not require perfect secrecy to succeed. They simply require more opacity than investigators can effectively penetrate.

The rollback of broad beneficial ownership reporting reinforces the need for beneficial ownership intelligence. As transparent data sources become scarcer, the financial crime community will increasingly rely on intelligence-led investigations, public-private collaboration, open source intelligence, digital investigations, social media analysis, network analytics and other nontraditional sources to fill the resulting gaps.

And as information availability narrows, the professionals charged with protecting the integrity of the financial system will be forced to become more innovative, more collaborative and more resourceful than ever before. Intelligence offers an invaluable asset to adapt accordingly.

Learn how Fivecast helps investigators by combining open source intelligence, social media analysis and digital footprint data to build a more complete picture. Download Fivecast’s industry brief.

Carahsoft Technology Corp. is The Trusted Government IT Solutions Provider, supporting Public Sector organizations across Federal, State and Local Government agencies and Education and Healthcare markets. As the Master Government Aggregator for our vendor partners, including Fivecast, we deliver solutions for Geospatial, Cybersecurity, MultiCloud, DevSecOps, Artificial Intelligence, Customer Experience and Engagement, Open Source and more. Working with resellers, systems integrators and consultants, our sales and marketing teams provide industry leading IT products, services and training through hundreds of contract vehicles. Explore the Carahsoft Blog to learn more about the latest trends in Government technology markets and solutions, as well as Carahsoft’s ecosystem of partner thought-leaders.


Related Articles